nerdexam
Cisco

300-620 · Question #339

Refer to the exhibit. A network engineer must configure a Cisco ACI fabric that meets these requirements: - The interface Eth1/2 must accept traffic only from EP2. - The interface Eth1/1 must accept…

The correct answer is D. Multi-auth on Eth1/1. Eth1/1 must accept traffic from both EP1 and EP2, and EP1 and EP2 must authenticate To achieve this, Multi-auth mode must be configured on Eth1/1. Multi-auth mode allows multiple endpoints to connect to the same interface, but each endpoint is authenticated independently…

ACI Fabric Infrastructure

Question

Refer to the exhibit. A network engineer must configure a Cisco ACI fabric that meets these requirements:

  • The interface Eth1/2 must accept traffic only from EP2.
  • The interface Eth1/1 must accept traffic from EP1 and EP2.
  • EP1 and EP2 must authenticate independently on Eth1/1.

Which 802.1x host modes must be configured to meet these requirements?

Exhibit

300-620 question #339 exhibit

Options

  • ASingle-host on Eth1/1
  • BSingle-host on Eth1/1
  • CMulti-auth on Eth1/1
  • DMulti-auth on Eth1/1

How the community answered

(22 responses)
  • A
    5% (1)
  • C
    14% (3)
  • D
    82% (18)

Explanation

Eth1/1 must accept traffic from both EP1 and EP2, and EP1 and EP2 must authenticate To achieve this, Multi-auth mode must be configured on Eth1/1. Multi-auth mode allows multiple endpoints to connect to the same interface, but each endpoint is authenticated independently. Eth1/2 must accept traffic only from EP2: To enforce that only EP2 is allowed on Eth1/2, Single-host mode must be configured. Single- host mode ensures that only one device is allowed to connect and be authenticated on the interface at a time.

Topics

#802.1x#multi-auth#port security#endpoint authentication

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice